The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.3 Monterey. It is, therefore, affected by multiple vulnerabilities, including the following:
  - A use after free issue was addressed with improved memory management. Successful exploitation could   result in arbitrary code execution with kernel privileges (CVE-2022-22614). 

  - A logic issue was addressed with improved state management. Successful exploitation could result in   privilege escalation (CVE-2022-22632).

  - A null pointer dereference was addressed with improved validation. Successful exploitation could   result in a denial of service condition. (CVE-2022-22638).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6195-1 advisory.

    It was discovered that Vim contained an out-of-bounds read vulnerability. An attacker could possibly use     this issue to cause a denial of service or

    execute arbitrary code. (CVE-2022-0128)

    It was discovered that Vim did not properly manage memory when freeing allocated memory. An attacker could     possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0156)

    It was discovered that Vim contained a heap-based buffer overflow vulnerability. An attacker could     possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0158)

    It was discovered that Vim did not properly manage memory when recording and using select mode. An     attacker could possibly use this issue to cause a denial of service. (CVE-2022-0393)

    It was discovered that Vim incorrectly handled certain memory operations during a visual block yank. An     attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
    (CVE-2022-0407)

    It was discovered that Vim contained a NULL pointer dereference vulnerability when switching tabpages. An     attacker could possible use this issue to cause a denial of service. (CVE-2022-0696)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-014 advisory.

    A flaw was found in vim. A possible heap-based buffer overflow vulnerability allows an attacker to input a     specially crafted file, leading to a crash or code execution. The highest threat from this vulnerability     is system availability. (CVE-2021-4019)

    vim is vulnerable to Use After Free (CVE-2021-4069)

    A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a     specially crafted file leading to a crash or code execution. (CVE-2021-4136)

    A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a     specially crafted file leading to a crash or code execution. (CVE-2021-4166)

    A flaw was found in vim. A possible use after free vulnerability could allow an attacker to input a     specially crafted file leading to a crash or code execution. (CVE-2021-4173)

    A flaw was found in vim. A possible use after free vulnerability could allow an attacker to input a     specially crafted file leading to a crash or code execution. (CVE-2021-4187)

    It was found that vim was vulnerable to use-after-free flaw in win_linetabsize(). Sourcing a specially     crafted file in vim could crash the vim process or possibly lead to other undefined behaviors.
    (CVE-2021-4192)

    It was found that vim was vulnerable to an out-of-bound read flaw in getvcol(). A specially crafted file     could be used to, when opened in vim, disclose some of the process's internal memory. (CVE-2021-4193)

    vim is vulnerable to Out-of-bounds Read (CVE-2022-0128)

    It was found that vim was vulnerable to use-after-free flaw in the way it was treating allocated lines in     user functions. A specially crafted file could crash the vim process or possibly lead to other undefined     behaviors. (CVE-2022-0156)

    It was found that vim was vulnerable to a 1 byte heap based out of bounds read flaw in the     `compile_get_env()` function. A file could use that flaw to disclose 1 byte of vim's internal memory.
    (CVE-2022-0158)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
159106	macOS 12.x < 12.3 (HT213183)	Nessus	MacOS X Local Security Checks	2022/3/21	2024/5/28	critical
177891	Ubuntu 22.04 LTS : Vim vulnerabilities (USN-6195-1)	Nessus	Ubuntu Local Security Checks	2023/7/3	2024/8/27	high
212465	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-014)	Nessus	Amazon Linux Local Security Checks	2024/12/11	2024/12/12	high

检测

插件搜索

critical

high

high